Security Response Engineer

Chainlink Labs is the primary contributing developer of Chainlink, a decentralized computing platform powering the verifiable web. Chainlink stands as the industry-standard platform for accessing real-world data, offchain computation, and secure cross-chain interoperability across any blockchain. The company collaborates with major financial institutions and top Web3 teams, establishing itself as a leader in the blockchain infrastructure sector.

As a Security Response Engineer on the Threat Management team, you will be responsible for preventing, detecting, and responding to security incidents that impact the company, both on and off the chain. Your role will involve developing and deploying tools to automate, enrich, and integrate data from various sources into our security stack. You will also be integral in fostering a culture of security across the organization.

Key Responsibilities:

• Drive the resolution of security incidents across all facets of the company.
• Build novel detection capabilities for threats in local, cloud, and blockchain environments.
• Collaborate with teams across infrastructure, finance, IT, and HR on security-related projects.
• Develop tools to automate response processes, expediting analysis workflows.

Requirements:

• Participate in a week-long on-call rotation.
• Experience writing detection rules focused on threat actor tactics, techniques, and procedures (TTPs).
• Proficiency in threat hunting across large datasets.
• Coding experience in Python, Ruby, Go, or similar languages.

Desired Qualifications:

• Background in software engineering, computer science, or computer security.
• Experience with AWS, GCP, or other cloud providers.
• Familiarity with the analysis of host and network telemetry.
• Startup experience.

Language Requirements:

• No specific language requirements mentioned.

Additional Information: All roles with Chainlink Labs are global and remote-based. While working hours are flexible, overlapping some hours with Eastern Standard Time (EST) is preferred. Chainlink Labs is an equal opportunity employer and welcomes all qualified applicants.